A Thai court has approved the extradition to the U.S. of a Malaysian
man allegedly involved in hacking credit card information, causing
massive losses for victims in the U.S. Read the full article. [Computerworld]
A pair of researchers has amassed nearly 8,000
iPhones and Android smartphones in an experimental mobile botnet that
demonstrates the ease of spreading potentially malicious applications
on these devices. Read the full article. [Dark Reading]
A security vulnerability identified in Opera can be exploited to crash users’ browsers, but probably can’t lead to the remote execution of malware, a company spokesman said. Read the full article. [The Register]
Cisco has released a number of reports on vulnerabilities in its products. It is possible to disrupt the transfer of voice data in the Unified Communications Manager using crafted SIP, SCCP and CTI packets. Read the full article. [The H Security]
Microsoft’s idea that the fight against malware could be funded by an Internet tax is “horrible,” an analyst said as other experts weighed in on a recent comment by the company’s security chief. Read the full article. [Computerworld]
A now available second maintenance release for PHP 5.3 fixes more than 60 bugs and closes several security holes which were already corrected in version 5.2.13, from the 5.2 branch, last week. Read the full article. [The H Security]
Like the sequel to a successful movie, the botnet behind the distributed denial of service attacks that hit the country of Georgia during its conflict with Russia in 2008 has been updated. This time though, the idea isn’t hacktivism—it’s stealing financial data and, unlike in the case of other Russian botnets, the targets are the operators’ own countrymen. Read the full article. [eWEEK]
The average Microsoft Windows user has software from 22 vendors on her PC, and needs to install a new security update roughly every five days in order to use these programs safely, according to an insightful new study released this week. Read the full article. [KrebsonSecurity]
Economic pressures are driving more businesses and governments to nervously eye cloud computing, despite
myriad unanswered questions that swirl around a single central concern: security. This was backdrop for a panel discussion
between CISOs at this week’s RSA Conference. Read the full article. [Network World]
Computer scientists say they’ve discovered a “severe vulnerability” in the world’s most widely used software encryption package that allows them to retrieve a machine’s secret cryptographic key. The bug in the OpenSSL cryptographic library is significant because the open-source package is used to protect sensitive data in countless applications and operating systems throughout the world. Read the full article. [The Register]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
